156-561 by CheckPoint Actual Free Exam Q&As

Question 1

Which of the following statements is true?

A. Using Azure, it is not possible to protect multiple subnets with a single NIC gateway. B. Using Azure, you can only protect one subnet with a single NIC gateway. C. Using Azure, you can only protect up to two subnets with a single NIC gateway. D. Using Azure, it is possible to protect multiple subnets with a single NIC gateway.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 2

Introduction to Cloud Security Posture Management uses which of the following to connect, communicate, and collect information from cloud accounts and third party tools?

A. SmartConsole B. CLI C. HTML D. APIs

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 3

What MS Azure feature needs to be configured to allow traffic to the gateway?

A. Source/Destination Check B. IP Check C. User defined routes D. IP Forwarding

Discussion 0

Correct Answer: D Vote an answer

Question 4

In the Cloud Security Blueprint, the South Hub handles...

A. House the cloud Workloads B. Inbound and customer-facing traffic C. Non-transitive traffic between peered networks D. Internal spoke to spoke traffic, Spoke to Internet (Egress) traffic, and cloud to on-premises traffic

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 5

When talking with your customer about AWS cloud strategy, the customer advises you the new AWS cloud will be a greenfield environment. What does this mean to you?

A. Customer is changing strategy to include new colocation datacenter B. Greenfield means the AWS environment will be all new and built with all new cloud infrastructure, resources and applications C. This means customer will be deploying new cloud resources that will be resilient across the customer's existing datacenter D. Customer is referring to DevOps blue-green deployment where customer deploys new applications to the green environment without affecting the blue environment which is actively serving applications

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 6

What is true of Ansible?

A. It utilizes Playbooks written in JSON B. It uses ACL Hiyashi scripting system C. It utilizes Playbooks written in YAML D. It was created by Hashicorp

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 7

Which scripting language is used by CloudGuard to develop templates that automate Security Gateway deployments?

A. Python B. JSON C. C++ D. Perl

Discussion 0

Correct Answer: B Vote an answer

Question 8

What does VPC stands for in AWS?

A. Video Player Controller B. Valid Public Cloud C. Virtual Private Cloud D. Virtual Protected Cluster

Discussion 0

Correct Answer: C Vote an answer

Question 9

Cloud Security Posture Management operational modes for cloud accounts are:

A. Read Only, Full Protection, Region Lock B. Read/Write, Partial Protection, Full Protection C. Read Only, Read/Write, Region Lock D. Read Only, Read/Write, Full Protection

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 10

Deployment of a Security Gateway was initiated on AWS using a CloudFormation Template available through sk111013. The deployment process, after a while failed and rolled back. What could be the probable cause of this failure and roll back?

A. The web browser used to run the template was not compatible B. The template used was for some cloud platform other than AWS C. The specific software being deployed was not subscribed to in the AWS Marketplace Subscriptions D. The Security Management Server that will be managing the Security Gateway had a lower version

Discussion 0

Correct Answer: C Vote an answer

Question 11

Automated Security Policy enforcement requires coordinated effort between the Security Management Server, the Security Gateway and:

A. The SmartEvent Server B. The Cloud Service Provider C. The Application Server D. CloudGuard Controller

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 12

When using system routes and user defined routes in Azure, which takes precedent?

A. The most specific route takes precedent B. The user defined route takes precedent C. The newest route takes precedent D. The system route always takes precedent

Discussion 0

Correct Answer: A Vote an answer

CheckPoint Check Point Certified Cloud Specialist - R81.20 (CCCS) - 156-561 Exam Practice Test